Vulnerabilities

TI-2026-43870 CVE-2026-61226 · GHSA-35q5-4f7h-p787

Improper access control in Oracle Communications Converged Application Server

LOW 34

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: RTP Proxy).

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.00146 Published 2026-07-21 No fix listed CWE-284

TI-2026-43869 CVE-2026-61225 · GHSA-rq3r-7m47-pr24

LOW 37

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-07-21 No fix listed CWE-269

TI-2026-43868 CVE-2026-61224 · GHSA-rw3f-j562-h9wf

LOW 37

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security).

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.00375 Published 2026-07-21 No fix listed CWE-284

TI-2026-43867 CVE-2026-61223 · GHSA-f5wj-332h-xrj5

MEDIUM 41

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security).

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00392 Published 2026-07-21 No fix listed CWE-284